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This document is submitted in accordance with the require- 
ments of DRL Line Item 20 of Exhibit C of Contract No. NAS8- 
21004. This is the one hundred and thirty fifth trade study and 
analysis report submitted under this line item number. 
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1. INTRODUCTION 

1.1 Purpose - It has been recognized that factors such 
as cost, schedules and lack of prototype availability may pre- 
clude the performance of cluster type design verification test' 
ing. The purpose of this report is to present the results of 
a study performed to evaluate the effectiveness of a test pro- 
gram for AAP 1/2/3/4 which does not include a cluster test and 
to determine the gross simulation requirements for such a pro- 
gram. 


1.2 Scope - This report establishes a test program for 
AAP 1/2 and AAP 3/4 based on the specific ground rules identi- 
fied in section 1.5. Gross simulation requirements are identi' 
fied by geographic area and the complexity of the simulators 
are described in broad terms. 

Utilizing the prototypes assumed to be available in each 
area and the simulators established during the study, the test 
progranis effectiveness has been evaluated. 

The ability of the contractors to adequately qualify and 
and verify the design of individual carriers is not the basic 
concern of this study. The study is primarily concerned with 
the capability of the defined test programs to verify inter- 
carrier and cluster systems design compatibility. 

1.3 Reference Documents 

Contractor Documents 


RD 200000 


MD- 80-0018 


NASA Documents 


Performance and Design Require- 
ments, Orbital Workshop/Apollo 
Telescope Mount, Rev. 1, SCN 1, 
15 February 1967 

General Interface Schematics, 
AAP 1 through 4, On Orbit Con- 
figuration, 3 February 1967 


M-D ML 3200-055 Program Directive No. 3A, Flight 

Mission Directive for AAP 1/ 

AAP 2 
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M-D ML 3200.059 Program Directive No. 5, Flight 

Mission Directive for AAP 3/AAP 4, 
National Aeronautics and Space 
Administration 

50M02410 General Test Plan for Apollo 

Telescope Mount Project, 1 May 
1967, National Aeronautics and 
Space Administration 

Apollo Applications Test Require- 
ments, Coordination draft (not 
approved), 28 April 1967, National 
Aeronautics and Space Administration 

1.4 Terminology Definition 

In order to better understand the study results pre- 
sented in this report, some of the more significant terms have 
been defined. Due to the specific purpose of this study, many 
of the definitions apply only to their use in this study and 
may not agree with the universally accepted meaning of the term. 

1.4.1 Hardware and Test Specimen Definitions 

a. Flight hardware or flight carrier - In general, 
this applies to hardware fabricated to firm design 
specifications, and intended for operational (flight) 
usage. Normally, this hardware is built and tested 
after the design has been environmentally qualified 
and functionally confirmed. The exceptions on this 
study are the AM and MDA which will not have design 
verification flight configured prototypes (non- 
functional structural prototypes will be provisioned 
for qualification tests) consequently some design 
verification testing will be performed on the flight 
carriers. 

b. Prototypes - Unless other specified, this term 
means a fully flight configured article using the 
identical components, layout and mounting provisions 
as the flight hardware. On existing prototypes, 

the systems which have not been modified for the 
AAP program and do not directly interface with AAP 
mods need not be complete unless they are required 
to support test. Structural proto or structural 
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model refers to a completely flight configured 
structure with no functional components. 

c. Simulators - Three types of simulation are used 
in this study: 

1) Functional simulators- Unless noted other- 
wise, the term "simulator" refers to a functional 
simulator which will simulate the interface in- 
put and output dynamic characteristics of the 
article being simulated. Physical properties 
are not representative of the article being simu- 
lated (size, shape, etc.). The degree to which 
the simulator represents the simulated article 
will vary and is further defined in Appendix A. 

2) Mockups - The mockup will simulate the phyi- 
cal properties of the article being simulated 

in terms of size, shape, dimensions, layout, 
etc, Mockups do not have functional components 
and are used in this study mainly for fit, clear- 
ance and layout verification. 

3) Master gauge simulation - This type of simu- 
lation provides for simulation of some of the 
physical properties, especially at the inter- 
facing point, but not necessarily all of the 
physical properties of the article being simu- 
lated. The radiator gauge used at MSFC , for 
example, requires precision dimensions, hole 
patterns, and sealing technique at the AM-MDA 
interface point, but is not necessarily represent- 
ative of the radiator outboard profile, weight, 

C.G. , etc. 

1.4.2 Test Configurations 

a. Individual carrier tests are those tests per- 
formed on single CEI carriers. Although interfacing 
carriers may be simulated to facilitate valid test 
results, no two carriers are mated, either physically 
or functionally, in this category. 

b. Inter-carrier tests as used in this study refers 

to compatibility testing of the configurations achieved 
during launch configuration or between two major car- 
riers. For example, verification of compatibility 
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requirement. 
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c. Cluster test requirement refers to compatibility 
testing of three or more major carriers and the 
cluster systems created by the mating of these car- 
riers. 

To further clarify these three test configuration 
definitions, refer to the examples provided in the sketch below: 


Individual Carrier Test 



example: checkout of the CSM display and control system 



example: verify CSM to LM display and control compatibility 



example: verify cluster compatibility of CM to AM 

display and control 
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1.4.3 Test Categories 

a. Development testing as used in this study 
refers to the test activities performed to obtain 
data to assist in the development of the design, 

to evaluate suitability of materials and components 
to mission environments, and to establish some level 
of confidence in the selected design prior to com- 
mitting the design to a costly formal qualification 
program. 

b. Qualification as used in this study is con- 
sidered to be an individual carrier test activity 
limited solely to environmental qualification. 
Functional design verification under ambient, en- 
vironments is considered a design verification 
test as described under item "d" below. 

In this study, no qualification testing is 
accomplished at an assembly level higher than the 
CEI carrier. The term "dynamic testing" is not 
used in this study, since it is not a separate 
test category, but is in fact induced environment 
testing and accordingly is considered as part of 
environmental qualification. 

c. Acceptance testing is the functional test 
activity performed to prove that the flight hard- 
ware has been fabricated to design drawings, using 
approved processes and techniques and that the CEI 
performs in accordance with design specification. 

It is not the objective of acceptance testing to 
prove the validity and adequacy of the selected 
design, but rather to prove that the hardware has 
been built to that design. In general, acceptance 
testing at the CEI carrier level is performed under 
ambient environments, however, in some cases vibra- 
tion testing at less than qualification level and 
thermal vacuum testing may be included in the 
acceptance test activity. Since acceptance test- 
ing is performed on flight hardware exclusively, 
potential detrimental tests are not performed. 

d. Design verification testing is that test activity 
which is performed to verify or confirm the adequacy 
of the selected design. As used in this study, all 
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design verification testing is performed under 
ambient environments. Environmental testing, 
which is in reality a part of design verification, 
is performed under qualification testing. Within 
this broad category, three sub-categories of de- 
sign verification testing are used: 

1) Individual carrier design verification is 
that activity associated with a single carrier. 
Usually this test activity is performed with 
interface simulation and does not prove inter- 
face design compatibility, but does prove the 
design of the individual carrier. 

2) Inter-carrier design compatibility veri- 
fication is the test activity performed to 
prove compatibility between two carriers within 
the meaning of "inter-carrier" as described 
previously. 

3) Cluster design compatibility verification 
is that activity performed to prove cluster 
system design compatibility involving three 

or more carriers which when mated form cluster 
systems across the physical interfaces. 

e. Prelaunch checkout is that test activity which 
is performed at KSC to verify that the flight 
hardware is ready for flight. Generally, this 
activity consists of location change checkout of 
carriers which have just been subjected to exten- 
sive acceptance testing at the contractor facility. 
Accordingly, prelaunch checkout is usually less 
comprehensive than acceptance testing, and yet 
complete enough to establish confidence that sys- 
tem performances have not been degraded by pack 
and ship, transportation and storage. 

In some instances where two carriers are mated 
for the first time at KSC, the prelaunch checkout 
activity is more comprenehsive. 

Due to the nature of the ground rules estab- 
lished for this study, many more first-time mating 
activities occur at KSC than would normally be 
anticipated. 
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1.4.4 Test Types 

a. An integrity test is an in-process test per- 
formed during assembly to assure the article is 
constructed or assembled to design specifications. 

Tests include: Proof pressure testing, electrical 
short and ground testing and leak testing. 

b. A functional test is a test of the system's 
performance under an ambient environment. 

c. An environmental test is a test performed 
under simulated environmental conditions and may 
be performed with the test specimen operating or 
static depending on the objectives. 

d. A parametric test is a test performed during 
design verification testing under off-nominal^ 
operational conditions to evaluate the system s 
performance under abnormal condition. Parametric 
testing in excess of design limits is usually 
considered "off-limits" testing. 

e. An off-limits or design margin test is a design 
verification or qualification test under conditions 
more severe than those for which the hardware was 
designed to withstand. These conditions may be 
increased environmental levels, increased exposure 
durations, increased cycles or system parametrics 
in excess of design limit. Off-limits testing is 
generally used to verify calculated design safety 
margins and may be destructive in nature. 

f. A mission simulation is a functional test of 
«*carrior, inter-carrier or cluster in which the 
exact mission sequence is performed in compressed 
time. As an objective, all systems are energized 
and operated in the modes in which they would 
operate on orbit. This is usually a manned te§t. 

g. A contingency and FMECA validation is a series 
of tests which are performed o>n prototype hard- 
ware to verify that contingency planning is feasible 
and could be implemented if required during an on 
orbit* malfunction or emergency. A secondary objective 
of this type of testing is the validation of failure 
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mode effects analysis. Since this type of test 
activity involves simulation of failures in order 
to evaluate secondary failures and cumulative 
effects, the testing could be detrimental and is 
not performed on flight hardware. 

1.5 Ground Rules - In performing this analysis, certain 
ground rules were provided by NASA, and other ground rules 
evolved as the study progressed. Major ground rules were 
coordinated with NASA and approved as a basis for performing 
this study. 

In order to maintain consistency throughout the study, 
ground rules were rigidly adhered to, although in some cases 
application of other ground rules might provide a more logical 
test program. Manipulating the ground rules to fit specific 
cases would have increased the complexity of the study which 
would have prevented completing the study within the allotted 
time. 


1.5.1 As a basis for departure, it is assumed that all 
carriers, carrier modifications, add-on subsystems and experi- 
ments will be individually qualified and checked out. Func- 
tional performance of the individual carriers is not the con- 
cern of this study, but rather the ability to verify compati- 
bility of the carriers/experiments in a cluster configuration 
without actually performing a ground cluster test, 

1.5.2 With the exceptions noted below, performance re- 
quirements are based on the "Performance and Design Require- 
ments, Orbital Workshop/Apollo Telescope Mount", Rev. 1, SON 
1, dated 2-15-67, MMC Report RS 200,000. Interfaces are based 
on the "General Interface Schematics, AAP 1 through 4, On . 
Orbit Configuration", MD-80-0018, dated 2-3-67. 

Exceptions: 


a. The resupply function is not achieved through 
use of a separate module but is provided by modi- 
fication to a sector of the Flight 3 SM. Re- 
supply transfer is accomplished by external SM 

to AM umbilicals. 

b. The LM&SS will be flown on a separate flight 
(other than AAP 1-4) and will not form part of 
the cluster. 
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c. The IU of Flight 3 will carry S027 experiment 
and will interface with the CM via the SLA and SM 
(display and control of S027 in CM). 


d. The Flight 4 IU experiments will not have any 
interfaces with other modules (control from the 
ground via uplink and data transmission by IU 
system to ground station). 

e. Solar panels are hinged off the S-IVB and 
are not part of the SLA. 

f. The following experiments are stored in the 
MDA at lift off and operated on orbit in locations 
shown below. Reactivated experiment loads are 
considered in the simulator requirements for 


flight 3/4 checkout. 


D018 

OWS 

D019 

OWS 

D020 

OWS 

D022 

OWS 

MO 18 

OWS 

MO 50 

OWS 

M051 

OWS 

M052 

OWS /CM 

MO 53 

OWS 

M479 

MDA 

M508 

OWS 

M509 

OWS 

T020 

OWS 

M488 

MDA 

M489 

MDA 

M492 

MDA 

M493 

MDA 

S009 

MDA ext 

S018 

MDA 

S019 

MDA 

S063 

MDA 

S069 

MDA 

S070 

MDA 

T004 

MDA 

S065 

MDA 

M055 

MDA 


Reactivated Flight 3/4 


Activated for first time 
on Flight 3 & 4 


Reactivated Flight 3/4 


Reactivated 
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1.5.3 It Is assumed in this study that CSM modification 
from standard block II to AAP configuration is performed by 
NAA and not a separate contractor. 

1.5.4 Maximum testing will be performed at the carrier 
contractor's facility. 

1.5.5 Maximum utilization will be made of the KSC flight 
hardware test program to demonstrate experiment module inter- 
faces consistent with flight schedule constraints and hardware 
availability. 

1.5.6 Only existing or proposed carriers, either assumed 
or known to be available, were utilized for this test program. 

No additional prototypes or flight carriers were created for 
test articles. 

1.5.7 Carrier interface design verification test require- 
ments cannot be satisfied without mating either two prototypes 
or flight articles. Simulators, at best, will only verify to 

a limited degree, the carrier interface design verification 
test requirements. 

1.5.8 The test programs on the component and subsystem 
level will be increased over that which would be required for 
the cluster test program to supplement the analysis of cluster 
system compatibility with trend data, qualification data, over- 
stress and design margin data, etc. 

1.5.9 There will be no complete flight or flight configured 
prototype experiment modules shipped between centers or con- 
tractors. 

1.5.10 There will be no flight configured prototype test 
articles at KSC. 

1.5.11 There will be no experiment integration into car- 
riers at KSC with the exception of late arriving or time sensi- 
tive experiments. All experiments integration will be accom- 
plished at the contractor's facility prior to shipment to KSC. 

1.5.12 In this study, the S-IVB is not prewired. The 
cable harness is stored in the AM and carried into the LH 2 
tank after paaaivatton. 

1.5.13 The solar array is stored in pods on the side of 
the S-IVB and deployed from these pods. 
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1,6 Philosophies - The basic philosophy utilized for 
this test. program was to verify, to the maximum extent possible, 
the experiment module interfaces and cluster system compatibility 
without a cluster test program. 

All locations where the flight and prototype experiment 
modules were assumed to be available for testing were evaluated 
to determine the best test program utilizing available hard- 
ware. After preparation of a basic test program, the simulator 
requirements at each location were determined. 

In developing the test programs, the following general 
philosophies were formulated: 

1.6.1 Utilize the cluster non- functional mockup to a 
greater extent to determine mechanical interface problems and 
man-machine compatibility. 

1.6.2 Make the integration and prelaunch test program at 
KSC more comprehensive to include limited systems interface 
design verification testing. 

1.6.3 Utilize the results of individual module tests 
with extensive analyses to decrease the risk of cluster systems 
incompatibility in orbit. 

1.6.4 Analyze the results of the test program performed 
on each individual carrier to determine interface conditions 
that were not predicted by analysis. These conditions will be 
evaluated and test requirements imposed on the interfacing 
carrier, as required, to demonstrate carrier systems compati- 
bility with the new interface requirements. 

1.6.5 The following philosophies were established with 
respect to the use of simulators. 

a. The center or contractor requiring a simulator 
for carrier design verification, qualification 
testing, and acceptance testing will be responsible 
for design and build of the simulator in accordance 
with the requirements of the carrier interface de- 
sign specifications. These simulators will be 
referred to as Design Specification Interface (DSI) 
simulators. 
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b. The center or contractor responsible for pro- 
viding the flight carrier or experiment will be 
responsible for the design and build of the more 
complex simulators for their carrier or experi- 
ment required for semi-cluster test activities at 
KSC. These simulators will be referred to as car- 
rier simulators. 

c. Upon creation of a carrier simulator, the 
center/contractor will integrate the simulator 
into the flight hardware configuration control 
system in such a manner as to prevent the release 
of flight hardware engineering changes without the 
release of either a simulator change or a positive 
statement that a change is not required, 

d. After delivery of the carrier simulator to 
the using agency, the configuration of the simu- 
lator will be maintained as follows: 

- The carrier contractor who built the simu- 
lator will be responsible for maintaining 
the configuration engineering. Engineering 
changes will be forwarded to the user. 

- Using agency will physically install the 
modification kits provided by the carrier 
contractor who is responsible for the simu- 
lator. PM and spares will be the responsi- 
bility of the using agency, 

- Improvement changes initiated by the user or 
simulator design incompatibilities involving 
the simulator will be processed through a 
liaison system provided by the simulator 
contractor. 

e. The carrier interface design verification 
test requirements cannot be satisfied by utilizing 
a simulator, but requires the two interfacing car- 
riers. The simulator cannot simulate the inter- 
face to the degree required to find unexpected 
incompatibilities that were not determined by 
analysis. Therefore, the confidence that the 
module interfaces will be compatible in orbit, 
utilizing simulators, is relatively low. 
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1.6.6 The following test philosophies will be imposed 
on the individual experiment module test program to demon- 
strate an adequate safety margin of the carrier interfacing 
systems and to provide a higher level of confidence that the 
interfacing systems can meet the cluster level test objectives, 

a. EMC Testing - Perform susceptibility tests at 
the integrated experiment carrier level. Verify 
that the critical circuits have an adequate safety 
margin when the injected energy is above predicted 
levels. Perform a module radiation (EMC) test to 
verify the values that are required for EMC test 
of the other cluster carriers. 

b. Cluster System/Experiment Compatibility - By 
the use of interface simulators (DSI) , simulate 
the operational levels of the interfacing carrier 
subsystems that would represent the conditions 
imposed by operation of the simulated experiments. 
Exceed these levels on critical systems to verify 
an adequate safety margin. 

c. Cluster Systems Parametric Variations - By 
the use of interface simulators (DSI), simulate 
the operational limits of the interfacing carrier 
subsystems. Exceed these levels on critical sys- 
tems to verify an adequate safety margin. 

d. Real Time Mission Simulation - Test each car- 
rier individually, starting with the carrier sus- 
pected of having the problem. Evaluate the test 
results and use analysis to determine the effect 
on the carrier electrical and mechanical inter- 
faces. Impose these conditions on the interfacing 
carrier, utilizing simulators. 

e. Contingency Planning Verification and FMECA 
Validation - Simulate failures in the cluster 
systems through use of a prototype or flight car- 
rier and interface simulators. Use analysis to 
determine failure effect on all interfacing car- 
rier subsystems and impose these conditions on 
the interfacing modules. 
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2. FLIGHT 1/2 TEST PROGRAM 

2.1 Test Program Description - The test program described 
in this section is that portion of the total Flight 1 and 2 
test program relating to the verification of intercarrier and 
cluster systems compatibility. The basic test program is shown 
in the time based test and checkout sequence, figure 1. Figure 
1 illustrates the basic testing proposed for the individual 
qualification and flight carriers and the testing proposed be- 
tween prototype or flight carriers to verify intercarrier com- 
patibility. 

The portion of the Flight 1 and 2 test program that is 
not described in this report includes carrier development test 
programs and the subsystem, component, experiment and materials 
test programs. These programs, with the exception of the cluster 
system mockup, do not have a significant effect on the verifica- 
tion of the carrier interface. The cluster system mockup will 
be utilized to verify cluster system physical interfaces, clear- 
ances, access, etc. The proposed test program shown in the 
Flight 1 and 2 Time Based Test and Checkout Sequence has some 
significant changes over that proposed for the cluster test pro- 
gram. Basically these changes are: 

a. The test time at KSC has been extended one month 
over that proposed for the cluster test program. 

The specific areas are: 

- The AM/MDA space vehicle mate. This test se- 
quence was extended one week to verify the 
compatibility of the AM, MDA , IU, SLA, and 
S-IVB in the launch and simulated orbit con- 
figuration. 

- The cluster type tests involving the CSM, AM, 

MDA. This test sequence was extended two 
weeks to verify the cluster systems compatibil- 
ity. This is the first time that flight con- 
figured hardware has been assembled in a partial 
cluster configuration. 

- The compatibility tests of the AM/MDA combina- 
tion. This functional test was extended one 
week to verify the compatibility of the AM and 
MDA. This is the first time the flight con- 
figured AM and MDA have been mated. 
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b. The test time for the AM and MDA carriers has 
been extended due to the series testing required for 
design verification tests and refurbish time along 
with the acceptance test utilizing a single article. 

The time based test and checkout sequences were derived 
from the ground rules in section 1.0 of this report and from 
a technical evaluation of the program requirements. The test 
programs for the AM and MDA were based on information from 
MSFC , and CSM test programs were based on previous test pro- 
grams developed for AEP and the KSC test program was based on 
the Martin test program proposed during the Phase C Study 
(Report ED-2002-49). 

The time based test and checkout sequence shows the experi- 
ment module flow and the major experiment module simulators 
that are required during each test phase of this flow. 

The simulator requirements for each test are indicated 
by a number enclosed in a triangle. A triangle with an arrow 
pointing toward the module test flow indicates that the simu- 
lator is required during the test sequence(s) until another 
arrow leaves this test flow and points to a triangle with the 
same number. This indicates that the simulator usage is no 
longer required. The number in the triangle refers to a specif- 
ic simulator item number. Each simulator is described in Ap- 
pendix A by this item number. 

The simulator requirement summary, figure 3, defines the 
requirement for each experiment simulator and identifies the 
test requirement that is satisfied by the test involving this 
Simula tor. 

The basic experiment module test sequence was derived by 
determination of the acceptance test duration and sequence and 
using the ground rule that each specific qualification or de- 
sign verification test must be demonstrated before a similar 
acceptance test could be completed. 

An arrow at the end of a test sequence indicates that the 
carrier is moved to be mated with other carriers either for 
test or assembly. 

The basic carriers shown in the AAP Flight 1 and 2 Time 
Based Test and Checkout Sequence have the following configura- 
tions : 
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Test Article 


1. SM & CM Prototype 


2. SM & CM Flight 

3. AM Prototype - 
Structure #2 


4. AM Prototype 
Structure #1 


5. AM Flight 

6. MDA Prototype 
Structure #2 


Description 

These prototypes are modified to 
have the full Flight 1 configura- 
tion. 

These articles have a Flight 1 
configuration. 

This prototype structural article 
has a full Flight 2 structural con- 
figuration, capable of structural 
pressure integrity and dynamic 
testing to qualification levels. 

This structure article will have 
the proper interface to allow mat- 
ing to the MDA and an S-IVB tank 
dome section. In addition, mock- 
ups of the external components and 
experiments will be attached during 
the launch configuration and solar 
array deployment tests. 

This prototype structural article 
has a full Flight 2 structural con- 
figuration, capable of structural 
pressure integrity testing and 
static and dynamic testing to quali- 
fication levels. All internal and 
external components and experiments 
will be mass simulated. 

This article has a Flight 2 con- 
figuration. 

This prototype structural article 
has a full Flight 2 structural con- 
figuration, capable of structural 
pressure integrity testing and 
static and dynamic testing to quali- 
fication levels. All internal and 
external components will be mass 
simulated. This structural article 
will have the proper interface to 
mate with the AM and all docking 
ports will be in the launch con- 
figuration (all ports sealed). 
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Test Article 


7. MDA Prototype 
Structure #1 


8. MDA Flight 

9. SLA Prototype 

10. SLA Flight 

11. IU Flight 

12. S-IVB Flight 

13. S-IVB Mockups 
Prototype Segments 


Description 

This prototype structure article 
has a full Flight 2 structural con- 
figuration, capable of structural 
pressure integrity testing and dy- 
namic testing to qualification 
levels. This structural article 
will have provisions to mate with 
the AM and will provide the proper 
mass simulation at the AM/MDA inter- 
faces to allow dynamic testing of 
the AM in the launch configuration. 

This article has a Flight 2 con- 
figuration. 

This existing SLA will be modified 
to a Flight 2 configuration, with 
the solar deployment system (mechan- 
ical and electrical) installed. 

Solar array mechanical simulators 
will be provided to check storage 
and deployment clearances and opera- 
tion. 

This article has a Flight 2 con- 
figuration. 

This article has a Flight 2 con- 
figuration. 

This article will be modified to 
the Flight 2 launch configuration. 

The S-IVB Mockup will have a full 
size internal workshop configura- 
tion with all component and experi- 
ment mockups installed in the orbit 
configuration. All prototype seg- 
ments will be flight configured. 
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A test hardware summary of the Flight 1 and 2 test program 
is shown in figure 2. This hardware summary identifies all the 
Flight 1 and 2 carriers, the carrier contractors and the NASA 
centers responsible for the carriers. In addition, all carrier 
prototypes are identified, along with the required interface 
simulators to support the carrier test program. 

2.2 Simulator Requirement Summary - Figure 3 presents a 
summary of the simulator requirements in tabular form. As an 
example of the use of the figure, consider the first two lines 
which identifies the simulator requirements for the CSM tests 
at NAA. Line two shows the MDA simulator requiring data, com- 
munications and D&C simulation. The X in the "MDA through con- 
nection simulation" column indicates that the MDA simulation in 
each of these systems is basically a through connection with 
line drops and attenuation, etc. , consistent with the flight 
MDA. The actual functional components are in the AM simulator, 
consequently the AM, MDA and CSM simulators must be used together 
as shown in the sketch below. 
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Center 

Responsi- 

bility 

Location 

Flight 

Pro totypes 

Simulators ** 

Articles 

SM# 

Title 

■ ■ i 

MSC 

North 

CSM 

CSM (A) 

1 

AM 


American 

SLA 

SLA (A) 

2 

MDA j 


McDonnell 

AM 

AM (D) 

3 

MDA i 




*MDA Structural 

4 

CSM | 




n (a) 

5 

S-IVB Fwd. j 




*AM Structural 


Mockup 




#1 (A) 

*AM Structural 

6 

Experiment 

Sim. 




#2 (A) 

7 

IU Pass. Mod. 

MSFC 

MSFC 

MDA 

MDA (D) 

8 

AM 



Nose 

*MDA Structural 

9 

CSM 



Cone 

#1 (A) 

10 

LM A/S 




MDA Structural 
#2 (A) 

*AM Structural 

11 

12 

Experiments 

Docking 

Collar 




#2 (A) 

13 

AM Radiator 




SLA (A) 

14 

AM & IU Comp. 




S-IVB (0) 

IU Structural 


Mockups 




(A) 


i 


IBM 

IU 

IU (D) 

15 

S-IVB Pass. 

- 




16 

Mod. 

(Delete) 





17 

AM 


Douglas 

S-IVB 


18 

IU 





19 

AM 

j 




20 

Exp. Sim. 

KSC 

KSC 

CSM 1 


21 

LM/ATM 



SLA 1 


22 

IU/ S-IVB 


1 

i 

SLA 2 

AM 

MDA 

S-IVB 2 
IU 

Nose 
Cone 2 


23 

’ 

. 

CSM- 3 Sim. 

t 

i 


Legend: 

* Prototypes shipped between 
contractors 

** Simulators are described in 

Appendix A by simulator item no, 
A Assumed 


B NASA Directive 
C Known Trainer 
D Flight Article 
0 Available, but no planned 
usage 


Figure 2, Test Hardware Matrix 
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The following notes are referenced on figure 3. 

Note 1 - Data, communications and D&C interfaces through 
the MDA simulator. Power and reactant resupply (fluid 
and gas) interfaces directly with the SM. S-IVB loads 
on the AM carry in cable is simulated. 

Note 2 - MDA structural model (prototype) will satisfy 
physical checks but has no functional components. Simu- 
lator required for functional checks. AM structural model 
shipped to MSC after MAC tests. 

Note 3 - Data, communication and D&C interfaces through 
the MDA simulator. Power and reactant resupply inter- 
faces directly with AM. 

Note 4 - S-IVB forward mockup required for AM boot to 
S-IVB dome fit and leak checks. 

Note 5 - Only the AAP modification portion of the IU is 
required (mainly the passivation mod and program changes). 

Note 6 - Passivation mod portion of S-IVB only. 

Note 7 - Structural checks of fit and clearance between 
AM and MDA will be accomplished with AM structural model. 
Simulator will not require physical properties. 

Note 8 - LM A/S simulator must simulate ATM solar power 
as well as LM A/S to MDA connections. 

Note 9 - Experiment physical property simulators required 
for every experiment for which developer is not providing 
a prototype. 

Note 10 - Simulator must have both male and female docking 
provision to check all 5 ports. Capable of pressurizing 
simulator for leak check of ports and hatches. 

Note 11 - AM radiator master gauge plate required if AM 
structural model does not have radiator section. Simu- 
lator must have precision dimensions, hole pattern and 
pressure seal. 
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Note 12 - IU shell and AM structural models do not have 
components. Mockups of AM & IU components required in 
areas of marginal clearance to facilitate launch config- 
uration fit and clearance checks. 

Note 13 - S-IVB and IU simulation required for cluster com- 
patibility checks in MSOB (IU and S-IVB in VAB or AF 
hangar). Should provide simulation of OWS load variations 
during mission simulation (equipment and experiment activa- 
tion) . 

Note 14 - Experiment simulators will be required for those 
experiments for which the developer does not provide a 
prototype. 

Note 15 - CSM simulator will simulate only difference be- 
tween CSM 1 and CSM 3. 
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2,3 Evaluation - Using the prototypes, flight hardware 
and simulators described in the previous section, and based on 
the test activities shown in figure 1, valid qualification, 
design verification and flight hardware acceptance testing can 
be achieved on individual carriers. 

Since individual carrier varification is not the primary 
concern of this study, an evaluation against detailed require- 
ments has not been performed on the ability to verify individual 
carrier design. 

The ability to verify inter-carrier and cluster compati- 
bility has been evaluated against a set of specific require- 
ments developed to evaluate various cluster configurations in 
report ED-2002-69. The results of this evaluation is shown 
on figure 10. 

The evaluation of the effectiveness of the test program 
to satisfy the objective of proving design compatibility is 
summarized below. Figures 4-9, pages 30-35, illustrate the 
various test configurations that can be achieved in each area 
with the hardware and simulators previously identified. 

The complexity of the module interfaces upon which the 
analysis is based is illustrated in the data contained in 
Appendix B. 

2,3.1 General Evaluation - In general, the test program 
described would provide some level of confidence in probability 
of mission success, however, in many areas the adequacy is 
marginal and in a few instances, design compatibility cannot 
be verified to any extent. 

The majority of the compatibility verification is per- 
formed at KSC with the inherent risk that detection of a de- 
sign incompatibility at that point would have severe impact 
on both the flight schedule of that flight and on the total 
AAP program. The inability to perform potentially detrimental 
testing on the flight hardware at KSC will cause confidence in 
the validity of design safety margins derived by analysis to 
be questionable. 

Several weaknesses exist in the Flight 2 test program 
which will create significant risks, however, the majority of 
the difficulty appears to be in the area of verifying the 
Flight 1/2 cluster compatibility. 
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It should also be noted that this evaluation is based on 
Flights 1 and 2 only and presents a somewhat fictitious picture 
since the main risk area is in proving the total cluster (AAP 
1/2/3/4) compatibility. 

a. The design compatibility verification between the 
AM and OWS is inadequate. The program does not pro- 
vide for mating the AM with the S-IVB at any point 
prior to KSC. The AM boot to OWS dome fit, clearance 
and sealing method can be verified at MAC using the 
S-IVB simulator (partial dome and forward skirt mock- 
up). Douglas checks of the S-IVB using an AM simulator 
is inadequate for verifying compatibility. The extent 
of testing that can be performed on the AM/S-IVB com- 
bination at KSC is limited since mating will take 
place at the launch pad. One of the main risks would 
appear to be in inability to prove the adequacy of 
the AM cryogenic storage capacity which will be based 
on calculated cluster configuration leakage. The pro- 
gram does not afford an opportunity to verify the 
validity of the total leakage rate calculations. 

Testing cannot be accomplished at KSC since the test 
would require a complete passivation sequence on the 
LH 2 tank including internal sealing of the tank pene- 
tration points. 

While the boot to dome fit check may be performed 
at MAC, they will not have an IU and SLA to verify 
access to and ability for attaching and leak checking 
the connection once it is stacked on the launch pad. 

The inability to perform an adequate pre-flight leak 
check would present a significant risk. 

The complete activation and passivation sequence 
cannot be performed at any one location on a single 
combined test specimen. Each carrier - IU, AM, 

S-IVB - can be checked individually and some portions 
of the activation/ passivation sequence can be veri- 
fied at KSC on the flight AM/IU/S-IVB combination at 
the launch pad, however, the approach of performing 
segmented tests and combining the results by analysis 
to achieve system level confidence has proven to be 
inadequate in the past and it is felt that a signi- 
ficant doubt will exist at lift off in the ability 
to perform the passivation and activation of the OWS. 
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b. The Individual test programs for the AM and the 
MDA should be adequate, however, the reliability of 
the flight articles will be subject to doubt due to 
the requirement to perform design verification testing 
on the flight articles. A comprehensive design veri- 
fication program will require parametric testing and 
potentially detrimental tests such as off limits and 
over stress tests. Although refurbishment and re- 
acceptance prior to flight (replace components sus- 
pected of having been exposed to degrading conditions) 
could be considered, the difficulty is in determining, 
by analysis, which components may be on the failure 
threshold. A miscalculation could mean that a com- 
ponent will be on the failure threshold at lift off. 

An important disadvantage of the approach, al- 
though only partially related to the Flight 2 test 
program, is the fact that there will be no flight 
configured AM and MDA against which to verify CSM 
3 and LM AS/ATM compatibility since the only fully 
configured AM and MDA will be on-orbit before Flight 
3 and 4 test programs start. 

Another factor which must be considered is in the 
area of schedule constraints imposed by the use of 
'single articles to accomplish design verification, 
acceptance, integration, and prelaunch checkout test- 
ing. As shown on the time based flow, figure 1, the 
series test program is extremely tight and leaves 
little room for contingency. Use of a flight con- 
figured prototype would permit concurrent testing and 
would provide a means for continuing the test program 
into the four month period where the flight hardware 
is at KSC to further establish confidence in the 
hardware design. 

c. The main area of weakness in the test program is 
the inability to verify cluster compatibility and to 
establish an adequate level of confidence in cluster 
system design. 

Probably the single most significant risk in this 
region is in the broad area of EMC verification with 
severe difficulty in verification that no cluster RFI 
problems exists. No single test location other than 
KSC has the hardware necessary to accomplish any veri- 
fication of cluster EMC. All other locations require 
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the extensive use of simulation in their test program 
and simulators cannot provide valid EMC test results. 

The test activities at the MSOB can provide some 
valid verification of pure electro-magnetics but can- 
not be any verification of cluster RF compatibility 
due to the test configuration. The CSM will be in- 
side the altitude chamber of the MSOB, The AM/MDA 
will be adjacent to the chamber and mated to the CSM 
in the chamber via long marriage cables. The IU and 
S-IVB will be functionally simulated. 

Verification of the effects of the varying RF 
fields, intensities and fundamental and harmonic fre- 
quency mixing created by antenna radiation and RF 
reflections cannot be verified. Establishing confi- 
dence through engineering analysis would appear to 
be an insurmountable task. 

Related to the inability to verify EMC is the 
risk that the test program will not provide a means 
for detecting cluster communication problems associated 
with antenna masking and reflected RF interference fall- 
ing within receiver bandpasses. 

Analysis may establish some level of confidence 
that antenna masking will not occur. The problem of 
interference with the onboard receivers, however, may 
present a complex condition which defies satisfaction 
by analysis. While this could present some problems 
on the flight 1/2 cluster, the real severe problem 
will be created by the AAP 1/2/3/4 cluster, 

d. Several other areas of test activities appear to 
be weak, although the significance of the risks in- 
volved is less severe and some confidence can be 
established through analysis of individual carrier 
tests and the probable effects on the cluster systems. 

Cluster man-machine compatibility and mission time 
line verification cannot be completely satisfied by 
the test program, however, most of these activities 
lend themselves to segment testing and analysis. 
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Cluster mechanical clearances problems (e.g, , solar 
panel deployment, etc.) cannot be adequately verified 
and may impose a requirement to provide larger speci- 
fication clearance envelopes to avoid marginal clear- 
ances . 

e. Cluster system contingency planning and FMECA veri- 
fication cannot be adequately demonstrated. While 
this may present a risk factor, a more significant 
problem area will exist in the inability to verify 
these items in the AAP 1/2/3/4 cluster. 
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Includes S-IVB & 
Experiment Loads 



POWER AND RESUPPLY 


CSM CLUSTER DESIGN VERIFICATION 


Figure 4. NAA Test Configurations 
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Figure 5. MAC Test Configurations 
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Figure 6. Douglas Test Configurations 


flf/l/7r//V MARIETTA COrtPOKJXTtOIM 

DENVER DIVISION 



ED-2002-135 
16 June 1967 


Page 33 



n 

1 

1 

1 

J 


AM 

IU 


D&C PASS. MOD. | 

PROTOTYPE 


SIMULATOR 1 


i 

1 

1 A _| 


I 1 

S-IVB 

I PASS. MOD. I 

1 SIMULATOR 1 

I I 

I A i 


IU Design Verification 


Figure 7. IBM Test Configurations 
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Figure 8. MSFC Test Configurations 
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2.3.2 Evaluation Against Specific Requirements - The 
following sheets provide an evaluation of the test program 
against more specific test requirements. The first column 
identifies a specific test requirement. The next eight columns 
indicate the location where testing of this requirement may 
occur, but does not necessarily indicate that any one location 
or combination of locations satisfy the requirement completely. 

The next column assigns an evaluation figure to the ability 
of the test program to satisfy that requirement. Ratings are 
in descending order from 10 to 1 with 10 being high. The mean- 
ing of the ratings can be grouped into three categories as fol- 
lows : 


1-4 indicates that the test requirement cannot be satis- 
fied by this program, and that a relatively high risk 
factor is involved. 

5-7 indicates that the test program is marginal in this 
area. The significance of this rating would probably be 
influenced by the extent and quality of supplemental en- 
gineering analysis but confidence in design compatibility 
would probably be lower than desirable. 

8-10 indicates that the test program appears to be ade- 
quate in this area and should provide sufficient test 
verification. 

The final column provides a brief rationale for the evalua- 
tion rating assigned in the preceding column. 
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Figure 10. Evaluation Against Detailed Requirements (AAP 1/2) 
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Figure 10. Evaluation Against Detailed Requirements (AAP 1/2) (continued) 
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3. FLIGHT 3/4 TEST PROGRAM 

3.1 General Description - The test program described in 
this report is that portion of the total Flight 3 and 4 test 
program relating to the verification of intercarrier and cluster 
systems compatibility. This basic test program is shown in the 
time based test and checkout sequence shown in Figure 11. This 
test sequence shows the basic testing proposed for the individual 
qualification and flight carriers and the testing proposed be- 
tween flight carriers to verify their intercarrier compatibility. 
The test program is based on the ground rule that all carriers 
would be integrated and tested at the carrier contractor's facil- 
ity and that KSC will do the verification of intercarrier and 
cluster systems compatibility. This test program utilizes flight 
articles, which are available at KSC, to demonstrate intercarrier 
and cluster systems compatibility. However, the verification of 
Flight 2 and 4 orbit compatibility at KSC is limited by the test 
constraints imposed on the flight carriers (i.e., operating 
limits, number of cycles, schedules, etc.) and the inability to 
hard dock these carriers in a cluster configuration. This im- 
plies that only limited cluster systems compatibility testing 
can be accomplished with the proposed test program. 

The cluster system interface verification with Flight 2 
modules is not demonstrated in this program. The physical 
interface with the Flight 2 carriers is verified by the use of 
carrier simulators. These electrical and mechanical carrier 
simulators are utilized at KSC to verify correct physical and 
functional interfaces at the CSM 3 and MDA/AM interface and 
the LM and MDA interface. Flight carriers from Flights 1 and 
2 and Flights 3 and 4 are never mated due to carrier availability 
and the 6 month difference in launch schedule. 

The portion of the flight 3 and 4 test program that is not 
described in this report includes carrier development test pro- 
grams and the subsystem, component, experiment and materials 
test programs. These programs, with the exception of the cluster 
system mockup, do not have a significant effect on the verifica- 
tion of the carrier interface. The cluster system mockup will 
be utilized to verify cluster system physical interfaces, clear- 
ances, access, etc. The proposed test program shown in the 
Flight 3 and 4 Time Based Test and Checkout Sequence has some 
significant changes over that proposed for the cluster test 
program. 

The test time at KSC has been extended one month over that 
proposed for the cluster test program. The specific areas are: 
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a. The cluster type tests involving the CSM, ATM and 
LM. This test sequence was extended one week to veri- 
fy the cluster systems compatibility. This is the 
first time that flight configured hardware has been 
assembled in a partial cluster configuration. 

b. The compatibility tests of the LM/ATM combination. 
This functional test was extended three weeks to veri- 
fy the compatibility of the LM and ATM. This is the 
first time the flight configured LM and ATM have been 
mated. 

The time based test and checkout sequences were derived 
from the ground rules in section 1.0 of this report and from a 
technical evaluation of the program requirements. The test 
programs for the IU, LM and ATM were based on information from 
MSFC, the CSM test program was based on a previous test program 
developed for AEP and the KSC test program was based on the 
Martin test program proposed during the Phase C Study (Report 
ED-2002-49). 

The time based test and checkout sequence shows the carrier 
flow and the major carrier simulators that are required during 
each test phase of this flow. 

The simulator requirements for each test are indicated by 
a number enclosed in a triangle. A triangle with an arrow 
pointing toward the carrier test flow indicates that the simu- 
lator is required during the test sequence (s) until another 
arrow leaves this test flow and points to a triangle with the 
same number. This indicates that the simulator usage is no 
longer required. The number in the triangle refers to a 
specific simulator item number. Each simulator is described 
in Appendix A by this item number. 

The simulator requirement summary, Figure 13, Page 61, de- 
fines the requirement for each experiment simulator and identi- 
fies the test requirement that is satisfied by the test involv- 
ing this simulator. 

An arrow at the end of a test sequence indicates that the 
carrier is moved to be mated with other carriers either for 
test or assembly. 

The basic carriers shown in the AAP Flights 3 and 4 Time 
Based Test and Checkout Sequence have the following configurations: 
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Test Article 

1. SM & CM 
Pro to type 

2. SM & CM Flight 

3. IU Flight (3) 

4. LM A/S Prototype 

5. LM A/S Flight 

6. ATM Thermal Unit 


7. ATM Vibration Unit 
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Description 

These prototypes are modified to 
have the full Flight 3 configura- 
tion. 

These articles have a Flight 3 
configuration. 

This article has a Flight 3 con- 
figuration, including experiments 

This prototype will be modified 
to have the full flight 4 con- 
figuration. 

This article has a flight 4 con- 
figuration. 

This unit has a full ATM structural 
configuration, capable of thermal 
vacuum testing, with the thermal 
properties of each ATM component 
or experiment simulated. This 
thermal unit will have the proper 
thermal coating and surfaces re- 
presentative of the flight con- 
figured ATM, will have the LM 
attach points for attachment of 
the ATM to the LM thermal simu- 
lator during thermal vacuum test- 
ing, and will have the solar panel 
attach points to mount the solar 
panel simulators. 

This unit has a full ATM structural 
configuration, capable of static 
and dynamic testing to qualifica- 
tion levels. All internal and ex- 
ternal subsystem components and 
experiments will be mass simulated. 
This unit will have the SLA attach 
points for attachment to the SLA 
sirrulator and the LM attach points 
for placement of the LM mass simu- 
lator on the ATM during vibration 
tef ting. 
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Test Article 

8. ATM Flight System 
Pro to type 

9. ATM Flight 

10. SLA Flight (4) 

11. IU Flight (4) 
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Description 

This prototype will have a com- 
plete ATM configuration includ- 
ing all experiments. 

This article has a flight 4 con- 
figuration. 

This article has a flight 4 con- 
figuration. 

This article has a flight 4 con- 
figuration including experiments. 


A test hardware summary of the flight 3 and 4 test program 
is shown in Figure 12. This hardware summary identifies all 
the Flight 3 and 4 carriers, the carrier contractors and the 
NASA centers responsible for the carriers. In addition, all 
carrier prototypes are identified, along with the required 
interface simulators to support the carrier test program. 
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Center 
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SLA 3 & 4 
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IBM IU 3 
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SM # 

Title . 

24 

LM A/S 

25 

AM 

26 

MDA 

27 

Exp. Sim. 

28 

ATM 

29 

CSM 

30 

MDA 

31 

AM 

32 

Rack Partial 


Mockup 

33 

Solar Power Sim. 

34 

S-IVB Partial 

35 

Mockup 

36 

LM A/S 

37 

Exp. Sim. 

38 

LM A/S Partial 


Mockup 
Comp. & Exp. 

Mass Property 
CM D&C 

LM Thermal Sim. 
LM A/S Sim. 
Solar Panels 
Comp. & Exp. 
Thermal Sim. 

MDA 

AM 

S-IVB OWS Exp. 


Legend : 


Shipped off site for thermal vacuum testing 

Simulators are described in Appendix A by simulator item number 

Assumed 

NASA Directive 

Known Trainer 

Flight Article 
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3.2 Simulator Requirements Summary - Figure 13 presents 
a summary of the simulator requirements in tabular form. As 
an example of the use of the figure, consider the first three 
lines which identify the simulator requirements for the CSM 
tests at NAA. 

Line three shows the MDA simulator. The X in the ”MDA 
through connection simulation” column indicates that the MDA 
simulation is basically a through connection with line drops 
and attenuation, etc., consistent with the flight MDA. The 
actual functional components are in the AM and LM A/S, and 
consequently, the AM, MDA and LM A/S simulators must be used to- 
gether as shown in the sketch below. 
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The following notes are referenced on Figure 13: 

Note 1 - LM simulators will include ATM functions that 
interface via LM or that are reflected across the LM-CM 
interface. 

Note 2 - Resupply capability is assumed to be located in 
a sector of the SM. Transfer is assumed to be by 
EVA connected AM-SM external umbilicals. 

Note 3 - This two part simulator will provide through con- 
nections only. Part two will consist of a partial axial 
docking port, including aids. 

Note 4 - Simulation of varying experiment loads (MDA & 

OWS operating (experiments) reflected on the SM power 
source (fuel cells) via the AM distributor. Simulation 
of S027 experiment (carried in IU of AAP 3) required to 
checkout CM display and control. 

Note 5 - Simulates the CSM power, communication, and D&C. 

Note 6 - The MDA is a two part simulator. Part one simu- 
lates through connections. Part two is a partial axial 
docking port including docking aids. 

Note 7 - Partial rack mockup must provide precision simula- 
tion of rack attachment surfaces and technique. Forward 
portion in vicinity of interface must be representative of 
rack size and shape for fit and clearance checks. Some 
rack components may require mockup for interference checks. 

Note 8 - CM simulation of display and control for S027 
experiment checkout. Must include characteristics of 
cable from CM to IU via SM and SLA (line drop, etc.). 

Note 9 - Forward S-IVB partial mockup to facilitate flight 
4 launch configuration fit and clearance checks (same 
one as provided for flight 2 checks). 

Note 10 - Experiment simulators required during ATM quali- 
fication and design verification if prototypes are not 
provided by the developer. Size and shape not required. 
Simulator item 23 will satisfy fit and clearance check 
requirements. 
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Note 11 - LM A/S partial mockup must be representative of 
size, shape and attachment point (for fit and clearance 
check) and must be representative of weight and CG for 
dynamic testing of the ATM structural model and flight 
article. 

Note 12 - Non- functional simulation of the LM thermal 
transfer characteristics at the ATM rack interface. 

Note 13 - Simulation of D&C , power distribution, communi- 
cations and capability for accepting EDS fluids to simu- 
late ATM rack storage depletion (this simulation may be 
part of ATM checkout GSE) not required for thermal model 
test. 

Note 14 - Sufficient portion of solar panels (stubs) to 
provide representative shadowing on ATM. Must be strong 
enough to be deployed in one "G" or must have supple- 
mental support. 

Note 15 - Component and experiment conducted and radiated 
thermal characteristics simulation to be used with the 
ATM thermal model for development tests. 

Note 16 - Component and experiment mockups for dynamic 
testing on ATM structural model. Must be representative 
of attachment method, weight and CG. 
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3.3 Evaluation - The ability of this test program to satisfy 
inter-carrier and cluster compatibility verification has been 
evaluated against a specific set of requirements. This evalua- 
tion is presented in Figure 20. 

Figures 14 through 19 illustrate the various test configura- 
tions that can be achieved in each test location. 

The complexity of the carrier interfaces is illustrated in 
the data contained in Appendix. B. 

3.3.1 General Evaluation - Utilizing the hardware assumed 
to be available at the various locations, adequate design veri- 
fication can be accomplished on the individual carriers of flights 
3 and 4. 

While extensive modifications will be required on the CSM to 
facilitate the resupply functions that were originally assigned 
to a separate resupply module, the test program should provide 
adequate verification of the CSM modification design. It should 
be noted that this study is based on the use of a flight con- 
figured CSM prototype at NAA for qualification and design veri- 
fication. 

It is felt that this approach is mandatory due to the ex- 
tensive modifications to sector 1 of the SM. If the resupply 
function were provided by a separate module, the concept of 
qualifying and verifying the design on the flight CSM might be 
feasible. 

With the exception of the S027 experiment which is installed 
in the IU and has D&C provisions in the CM, there are no inter- 
carrier test requirements on flight 3. Adequate verification 
of this requirement is satisfied by NAA tests on the CM using 
an S027 experiment simulator; at IBM using a CM display and 
control simulator, and at the launch pad where the flight CM 
display and control is mated with the flight experiment via the 
SLA cable harness. 

No launch configuration design verification test require- 
ments are envisioned for flight 3. 

Individual design verification testing on the ATM and the 
LM A/S appears to be adequate based on the assumption that an 
ATM thermal model, an ATM vibration unit and a complete flight 
configured prototype is provided. Due to the extent of modifica- 
tions on the LM A/S, it is assumed that a flight configured LM 
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prototype will be used by Grumman for design verification test- 
ing. 


The ability to verify flight 4 inter-carrier design compati- 
bility is questionable. Testing at MSFC and the off-site thermal 
vacuum chamber makes use of LM simulation while the Grumman test 
activities use an ATM functional simulator and rack mockup. Valid 
compatibility verification cannot be accomplished at these loca- 
tions. 

The flight LM A/S and ATM will be mated and checked out at 
KSC during prelaunch checkout. The extent of design verifica- 
tions that can be accomplished on the flight hardware, however, 
is limited in the areas of parametric testing, contingency plan- 
ning verification, and automatic corrective actions. There is 
also the added risk of detecting a design incompatibility dur- 
ing prelaunch checkout which would result in severe schedule 
impact. 

Flight 4 launch configuration verification can be accomplished 
at MSFC using the S-IVB partial mockup, the IU structural shell 
and the SLA prototype provided for flight 2 testing, the ATM 
prototype, and the LM partial mockup. 

The direct CSM to LM A/S interface compatibility (docked 
mode) cannot be adequately verified until KSC since both NAA 
and Grumman will use interface simulation. Fairly complete 
verification can be accomplished at KSC during prelaunch check- 
out. Again there is some risk involved in late detection of an 
incompatibility. However, probability is low since the AAP 
modifications have little effect on the basic CSM to LM inter- 
face and the standard CSM-LM compatibility will have been demon- 
strated by the Apollo program prior to flight 4 of the AAP 
program. 

The major risk in this test program, as well as the flight 
1/2 test program, is the inability to verify cluster compati- 
bility. 

Sector 1 of the flight 3 SM will be modified to provide the 
resupply capability for the cluster during the extended duration 
mission. This resupply will be accomplished via external umbili- 
cals to the AM storage vessels. One of the most significant 
risks involved in this program is the inability to verify CSM 
to AM compatibility and commodity transfer techniques. While 
the CSM tests at NAA will use an AM simulator, the first flight 
configured hardware mating will occur on orbit. Similarly, 
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the first attempt at transferring critical commodities through 
a fully flight configured system will occur when resupply of 
the cluster is required on orbit. 

This condition exists because, by ground rule, there is no 
fully flight configured AM prototype provisioned for the flight 
1/2 test program. The flight AM will be on orbit before the 
flight 3 SM modifications are ready for test. Consequently, no 
flight configured AM is available for SM compatibility verifica- 
tion. 


Similarly, compatibility between CSM 3 and the OWS, MDA and 
AM in the areas of communications, data systems and display and 
control cannot be verified. While this condition is obviously 
undesirable, the risk is not as severe as the resupply problem. 
Indications are that the differences between CSM 1 and CSM 3 
in the areas of data, communications and D&C interfaces with 
the cluster are not extensive. Design verification on flight 
1 CSM should provide confidence in the design compatibility of 
CSM 3. 

LM A/S to MDA direct interfaces cannot be verified, how- 
ever, the extent of the interface appears to be relatively 
small consisting of an emergency power provision and some D&C. 

The cluster configuration compatibility cannot be verified 
in the areas of EMC, ground-on orbit compatibility, FMECA and 
contingency planning verification, man-machine compatibility, 
and cluster mission simulation. 

While some level of confidence may be acquired through ex- 
tensive analysis supplementing the results of the flight 1/2 
and flight 3/4 test programs, the complexity of the cluster 
systems would appear to make this approach invalid, or at best, 
questionable. This is especially true when considering the 
potential EMC problems that could be generated by the radia- 
tion of the numerous antenna systems shown in Appendix B. 

Neither the flight 1/2 nor the flight 3/4 provide for a full 
or partial cluster test in an on orbit orientation to determine 
the effects of RF reflection, antenna pattern overlap and inter- 
modulation. Attempts to determine these effects by analysis 
is not feasible. 
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3.3.2 Evaluation Against Specific Requirements - The follow- 
ing sheets provide an evaluation of the test program against more 
specific test requirements (Figure 20). 

The first column identified a specific test requirement. 

The next eight columns indicated the location where testing of 
this requirement may occur, but does not necessarily indicate 
that any one location or combination of locations, satisfy the 
requirement completely. 

The next column assigns an evaluation figure to the ability 
of the test program to satisfy that requirement. Ratings are 
in descending order from 10 to 1 with 10 being high. The mean- 
ing of the ratings can be grouped into three categories as 
follows: 

1-4 indicates that the test requirement cannot be satis- 
fied by this program and that a relatively high risk 
factor is involved. 

5-7 indicates that the test program is marginal in this 
area. The significance of this rating would probably 
be influenced by the extent and quality of supplemental 
engineering analysis but confidence in design compati- 
bility would probably be lower than desirable. 

8-10 indicates that the test program appears to be adequate 
in this area and should provide sufficient test veri- 
fication. 

The final column provides a brief rationale for the evalua- 
tion rating assigned in the preceding column. 
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Figure 20. Detailed Evaluation 
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Figure 20. Detailed Evaluation 
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Figure 20. Detailed Evaluation 
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4. CONCLUSIONS 

4.1 Flight 1/2 - The program described in this report is 
weak in many areas and will provide less than desirable confi- 
dence in on-orbit compatibility. 

The individual qualification and design verification of 
the Flight 1 carriers is adequate. 

The Flight 2 test program is hindered by the lack of a 
flight configured prototype AM and MDA and Flight 2 inter- 
carrier design verification testing at KSC will be limited by 
the use of flight carriers. 

Inter-flight testing between carriers of Flights 1 and 2 
can only occur at KSC and again is limited by the use of flight 
carriers. In addition to the technical risks involved, the 
possibility of detecting a design incompatibility at KSC within 
three months of launch presents a real risk of individual launch 
date slippage and total program schedule impact. 

While the Flight 1/2 test program is weak, the most severe 
problem is not readily evident, namely, the inability to verify 
total cluster 1/2/3/4 interface design compatibility. 

4.2 Flight 3/4 - The Flight 3/4 test program in this re- 
port is weak in many areas and will provide less than desirable 
confidence in on-orbit compatibility. 

As in the flight 1/2 test program, the qualification and 
design verification of individual flight 3 and 4 carriers seems 
adequate. 

Interflight testing (LM-CSM) can only occur at KSC on 
flight hardware and the design compatibility verification is 
weakened by constraints imposed on testing of flight hardware. 

In addition, the risk of discovering a design incompatibility 
at KSC could create severe schedule impact. 

While LM-ATM compatibility can be verified to some extent 
at KSC, again the use of flight hardware will limit the extent 
of design verification. Cluster compatibility cannot be veri- 
fied and the first verification of most cluster compatibility 
requirements will be accomplished on orbit. 
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It is evident from the evaluation of this program and the 
previous evaluation of the flight 1/2 program that the risk of 
complete or partial failure to achieve mission objectives will 
be high if a test program of this nature is implemented. 

4.3 Recommendations - While the test programs evaluated 
cannot provide the level of confidence that could be achieved 
through the use of a full cluster design verification test, 
it is felt that implementation of the following recommendations 
would greatly improve the alternate test programs. 

a. Provide a full flight configured prototype AM 
and MDA which would not only facilitate a more ade- 
quate flight 1/2 test program but would also estab- 
lish a means for verifying compatibility between 
elements of flight 1/2 and flight 3/4. This would 
provide a means for verifying compatibility between 
the SM resupply modification and the AM, eliminating 
one of the more significant weaknesses of the program. 
Mated AM-SM testing could be accomplished either at 
NAA or MAC. 

b. Perform a mated AM/MDA design compatibility test 
using the flight configured prototypes either at 
MSFC or at MAC. This requirement has become more 
significant in recent weeks as the complexity of the 
MDA increased from a basically static interface 
adapter to an active carrier. The requirement to 
operate numerous experiments within the MDA and the 
addition of active experiment support subsystems 
has changed the relationship between the AM and MDA. 

c. Perform a mated LM A/S and ATM flight configured 
prototype test at either MSFC or Grumman. The inter- 
face between these two elements (approximately 1200 
wires including redundancy) is not a simple interface 
and the concept of performing the first mate of flight 
configured LM and ATM at KSC would appear to present 
an unacceptable risk in terms of potential total pro- 
gram schedule impact. In addition, it is felt that 
since the LM is a manned carrier, it is extremely 
important that calculated design safety margins be 
verified by parametric and off limits testing which 
cannot be performed on flight hardware. 
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The main area of concern with respect to verifying design 
margins for added confidence in crew safety is the power inter- 
face. The power source is the solar panel and battery system 
on the ATM which feeds the LM distributor. A design incompati- 
bility in this area or an erroneous design safety margin cal- 
culation could result in a condition hazardous to the LM crew 
member. 

This report has provided a first look at the gross simu- 
lator requirements for the program, identifying only the major 
simulator elements. It is obvious that many additional but 
less costly simulators will be required to support this pro- 
gram. It is recommended that the identification of simulators 
be further pursued and that the identified simulators be better 
defined in terms of complexity. 

Two additional factors should be evaluated - cost and 
schedules. No attempt has been made to evaluate the cost of 
simulators identified. This effort cannot be attempted until 
the simulation requirements are defined in greater detail. 

While a gross program schedule has been provided, the simu- 
lator design and build schedules have not been established. 
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Appendix A - Simulator Descriptions 

Two categories of simulation are considered in this 
appendix:' "Design Specification Interface Simulators . (DSI)" , 
and "Carrier Simulators". 

Design Specification Interface Simulators (DSI) 

DSI simulators will be provided at the various carrier 
contractor facilities to support design verification, qualifica- 
tion, and acceptance testing of individual carriers. These 
simulators will represent the total interface as "seen" by the 
carrier under test. They will simulate the parameters of the 
carrier design specification , and may not be representative of 
the interfacing carriers to any extent. They will have the 
capability of verifying tolerance extremes as well as nominal 
values . 

Carrier Simulators 


In the absence of a cluster test program, inter-carrier 
and cluster compatibility can only be verified to a limited 
degree. This verification must be performed at KSC using 
flight hardware supplemented by complex carrier simulators. 

The carrier simulators will be representative of the 
actual flight hardware to the maximum extent possible. They 
may even employ actual flight components and systems, and 
configuration will be representative of flight hardware. 

One of the most severe problems associated with a test 
program of this nature is the inability to provide "carrier 
simulators" during individual carrier tests due to concurrent 
development of carriers. Consider the CSM and AM schedules 
as shown below: 
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CSM 


12 


I 


11 


' Develop , I 

Qual .Fab . 


10 


I 


Qual & Design 
Verification 


AM simulations at 
this point cannot | 
be based on AM 
design (not f irm) 
and must be DSI 
s imula tor s) — 


AM CEI, ! 

* Develop , I I 

J *Qual .Fab . i 


DSI Sim.- 


I 


t 


Firm CSM Design 


1 

Firm AM I 

Design | 

| AM carrier 


Qual 6c Design 


Ver if icat ion 




i 


simulators 
can be devel- 
oped at this 
point I 

I 


A carrier simulator (representative of the AM) cannot be 
provided for the CSM prototype testing. 

Instead, the CSM is tested against a DSI simulator (CSM 
specification parameters) which proves that the CSM design meets 
the CSM specification. If the eventual AM design is compatible 
with the CSM specification, the AM should be compatible with 
the CSM; however, this cannot be proved at this time using the 
DSI simulator. 


At approximately month 1 \ , the AM design testing is 
complete and an AM carrier simulator could be built and could 
be representative of the AM systems, however, it would be too 
late for CSM compatibility testing. Due to the problem of 
concurrent development schedules, the only area that was 
considered for carrier simulators was KSC. 
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Simulator Descriptions Matrix 

Where a physical and functional simulation is identified 
in a single simulator, it is probably more efficient to provide 
a two part simulator: One part physical and one part 

functional . 

The following notes are used on Appendix A simulator 
descriptions: 

Note 1: The physical interface of the water receiving and 

storage system between the AM and CSM may be eliminated 
if the alternate system, presently under investigation, 
is adapted. This system would eliminate the CSM to AM 
water system umbilical by providing a fixed quantity water 
dispersing valve in the CM from which the astronaut would 
fill a flexible wall container. He would hand carry the 
container through the MDA and into the AM. 

Note 2: The MDA will be developed, qualified, and accepted at 

MSFC by utilizing DSI simulators. The degree of carrier 
interface simulation provided by these simulators will 
depend on the type of subsequent test programs that will 
involve the MDA. If the prototype cluster test were to 
follow, the electrical portions of the DSI simulators 
required for MDA development, qualification and acceptance 
would be of relatively simple design due to the lack of 
complex subsystems within the MDA. In the simplest 
extreme, these simulators would only verify point to point 
continuity of the interconnecting cabling and operability 
of the few active components and experiments within the 
MDA. 

Without the cluster test program, these DSI simulators 
cannot be of simple design. These simulators must 
represent the carrier interface to the degree necessary to 
determine any problems resulting from possible field 
coupling between wires, line loss and other electrical 
perturbations resulting from the operation of equipment 
and possibly experiments within the MDA. Basically, the 
DSI simulators used with the MDA must comprise a fairly 
close duplication of the cluster interface with both 
electrical and chronological simulation. 
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Note 3: The following experiments are listed to identify each 

separate interface with the MDA. Satisfaction of the 
requirements for simulation may be accomplished either by 
the use of DSI simulators or by individual experiment 
simulators provided by the principal investigator for the 


experiment 

involved . 

Exp. No. 

Types of Interfaces with MDA 

MO 18 

Mechanical only 

MO 50 

Mechanical only 

M051 

Mechanical only 

MO 52 

Mechanical only 

MO 53 

Mechanical only 

MO 55 

Mechanical only 


M479 

Mechanical, power, data mgmt, water, 0 2 , vacuum 

M488 

Mechanical, power, data mgmt, vacuum 

M489 

Mechanical, power, data mgmt, water, vacuum 

M492 

Mechanical , vacuum 

M493 

Mechanical, vacuum 

M508 

Mechanical only 

M509 

Mechanical only 

S005 

Mechanical only (launched on CSM #1) 

S006 

Mechanical only (launched on CSM #1) 

S009 

Mechanical, power, data mgmt, D&C , thermal 

S018 

Mechanical, humidity control 

S019 

Mechanical only 

S063 

Mechanical, time ref 

S065 

Mechanical, time ref (launched on CSM #1) 

S069 

Mechanical, power, data mgmt, D&C 

S070 

Mechanical, power, data mgmt, D&C , thermal 

T004 

Mechanical, power, data mgmt, D&C, thermal 

T020 

Mechanical, D&C 

D018/020 

Mechanical, power, data mgmt, 0 ? , vacuum 

D019 

Mechanical only 

DO 2 2 

Mechanical only 


Note 4: The following experiments will be operated in the OWS. 

Simulation of the interface parameters may be satisfied by 
either DSI simulators or those provided by the principal 
investigators. 
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Exp, No. Types of Interfaces with OWS (AM) 


M018 
MO 50 
MO 51 
MO 52 
MO 53 
MO 55 
M439 
D019 
DO 22 
T020 


Power, data mgmt 
Power, data mgmt, D&C 
Power, data mgmt 

Mechanical only - no simulation required 

Power, data mgmt 

Power 

Power 

Mechanical only - no simulation required 
Power , D&C 

Mechanical only - no simulation required 


Note 5: Certain DSI simulator requirements identified for 

flights 3 and 4 may be satisfied by reworking the similar 
flight 1 and 2 DSI simulators. This is true for NAA 
requirements and portions of MSFC and KSC requirements. 


Note 6: The following listed experiments are those to be 

performed on the ATM. Satisfaction of the requirements 
for simulation may be accomplished either by the use of 
DSI simulators or by individual experiment simulators 
provided by the principal investigator for the experiment 
involved . 


Exp. No. 

Type of Interface with ATM/LM 


S052 

Mechanical , 

power, D&C, 

thermal 


S053A 

Mechanical , 

power , D&C 



S053B 

Mechanical , 

power , D&C , 

thermal 


SO 54 

Mechanical , 

power , D&C , 

thermal 


S055A 

Mechanical , 

power, data 

mgmt , D&C , 

thermal 

S055B 

Mechanical , 

power, data 

mgmt , D&C , 

thermal 

S055C 

Mechanical , 

power, data 

mgmt, D&C, 

thermal 

S056 

Mechanical , 

power, data 

mgmt , D&C , 

thermal 


Note 7: The following experiments are those to be reactivated 

during flight 3 and 4. Satisfaction of the requirements 
for simulation may be accomplished by the same simulators 
provided for flights 1 and 2 under this category. 
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Exp. No. 

Types of Interfaces 

MO 18 

(OWS) power, data mgmt 

MO 50 

(OWS) power, data mgmt, D&C 

MO 51 

(OWS) power, data mgmt 

MO 52 

(OWS) mechanical only - no simulation required 

MO 53 

(OWS) power, data mgmt 

MO 55 

(OWS) power 

M439 

(CM) power 

S005 

(CM) mechanical only - no simulation required 

S006 

(CM) mechanical only - no simulation required 

S015 

(CM) power, thermal 

S018 

(MDA) mechanical only - no simulator required 

S019 

(MDA) mechanical only - no simulator required 

S061 

(CM) power, data mgmt, D&C , thermal 

S063 

(MDA) time reference 

S065 

(MDA) time reference 

S069 

(MDA) power, data mgmt, D&C 

SO 70 

(MDA) power, data mgmt, D&C , thermal 
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APPENDIX B 

CARRIER FUNCTIONAL INTERFACE 


, ,^ e foliowing sheets summarize the major carrier interfaces 
ana illustrate the complexity of the various cluster systems 
created by the functional mating of the carriers. 

The sheets are arranged by systems - power, display and 
control, data management, communications and antenna systems. 

Each sheet identifies the interfaces for that system. The 
number after each interface defines the number of functions and 
does not necessarily indicate total number of wires. In many 
cases the functions are carried by redundant wires for increased 
reliability and load carrying capacity. 
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Figure B-2. Cluster Display and Control Interfaces 
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Figure B-4. Cluster Communications System Interfaces 
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Figure B-5. Cluster Antenna Locations 







